
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier: snYxIzrUtCmCfGCfUo01ykI+WPfYsa5M0+ySi+oFJ3A=
Subject key identifier: B1:22:11:E0:E6:A0:7C:44:C6:70:2A:DF:55:79:5E:AA:6F:B4:D3:C3
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial: 08C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number: 08C0
Signing time: Fri 02 Oct 2026 20:46:54 +0000
Manifest this update: Fri 02 Oct 2026 20:46:54 +0000
Manifest next update: Fri 09 Oct 2026 20:46:54 +0000
Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: Az8zoCU7wSgXxsWTeMOFShOxLtMuT9m02PqphSdHZcs=)
2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Validity
Not Before: Oct 2 20:46:54 2026 GMT
Not After : Oct 9 20:46:54 2026 GMT
Subject: CN=6ac0183e-79d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:3a:6f:45:d0:50:8b:d3:fc:1b:8b:de:85:
69:0a:01:6d:89:61:f4:31:c3:2c:ae:d6:13:0c:2c:
9b:15:97:6e:ca:1b:57:c8:a2:75:98:3a:b7:7c:cd:
6d:8a:44:4a:59:f2:4f:1e:e1:58:5c:35:31:92:2d:
de:28:42:81:ae:e2:8e:97:6a:1b:f2:74:63:94:ea:
5c:fe:50:e2:14:50:d9:2f:f1:b1:55:67:d0:39:db:
88:89:95:06:c9:14:6a:97:39:4b:bb:30:fb:d8:18:
21:e4:91:2b:76:35:95:b5:eb:fd:7b:32:79:d2:08:
fd:63:80:09:68:b1:59:6e:0c:4b:bb:78:75:26:2a:
85:d3:2c:80:f5:f0:6a:fb:41:c1:8e:3b:12:a7:97:
65:5a:88:db:42:df:c3:a3:bd:84:d0:c6:57:e1:6f:
2f:62:27:c6:99:40:28:81:59:ff:0d:6a:59:32:51:
00:83:f7:5c:c1:61:13:33:7b:7f:4b:83:50:8e:46:
fe:f8:e5:a2:22:d6:46:db:d7:52:35:90:0e:b3:5f:
75:b8:e6:b5:b9:d5:60:b1:bb:5a:fe:89:34:fe:1a:
fd:6f:8b:87:7d:c4:f2:58:dc:08:a9:da:97:1f:70:
c9:4e:31:57:da:a2:ed:21:11:2a:3b:94:27:38:87:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:22:11:E0:E6:A0:7C:44:C6:70:2A:DF:55:79:5E:AA:6F:B4:D3:C3
X509v3 Authority Key Identifier:
keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:24:e4:91:e1:43:2d:4b:2b:e8:48:78:11:21:c0:4c:04:c8:
fd:18:01:f0:5a:f1:3c:f6:53:6b:85:37:15:09:51:14:91:d1:
7f:71:44:41:c5:ca:89:08:5e:b4:0e:e6:88:15:1f:40:85:e0:
73:1a:70:c5:bd:b9:0f:04:2e:81:db:f8:62:44:13:aa:28:7b:
b2:bb:cf:17:1e:f8:ec:2c:57:de:ab:7a:29:e7:ea:1a:db:33:
94:65:b6:99:d7:6f:60:10:dd:67:32:69:bc:5c:24:00:af:e2:
c8:dc:34:d0:d4:b5:03:0a:4e:20:4a:2b:6d:1b:59:21:29:c4:
d8:2a:2e:c9:96:33:b6:b1:43:cb:a3:68:ee:99:4c:77:de:36:
f7:f2:25:39:b5:71:1d:70:9f:6b:aa:dd:4c:2e:72:20:d1:ef:
26:48:dc:ec:51:33:f5:bb:7c:d9:c3:6d:80:cf:fe:df:bb:24:
88:8c:0e:84:bb:24:d6:94:fe:ef:c4:a3:d1:69:cd:93:9e:b3:
1c:e0:00:40:87:68:d8:55:24:f3:99:97:3f:24:10:15:b4:41:
4f:80:2e:31:b3:d1:c4:18:63:a0:7a:c7:7e:01:91:cf:6d:57:
25:0c:04:ab:dc:31:c5:ba:8b:94:26:6b:5a:ea:4c:ba:35:e5:
7a:cb:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:05:08 2026 by rpki-client